medium4.6
CVE-2005-3209
Aenovo products (1) aeNovo, (2) aeNovoShop, and (3) aeNovoWYSI store password information in plaintext in the (a) control, (b) content, and (c) page tables, wh…
Impact
Aenovo products (1) aeNovo, (2) aeNovoShop, and (3) aeNovoWYSI store password information in plaintext in the (a) control, (b) content, and (c) page tables, which allows attackers with database access to obtain those passwords and gain privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aenovo | Aenovo | All versions |
| Aenovo | Aenovoshop | All versions |
| Aenovo | Aenovowysi | All versions |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=112872593432359&w=2
- http://secunia.com/advisories/17117/
- http://www.kapda.ir/advisory-78.html
- http://www.osvdb.org/19939
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22549
- http://marc.info/?l=bugtraq&m=112872593432359&w=2
- http://secunia.com/advisories/17117/
- http://www.kapda.ir/advisory-78.html
- http://www.osvdb.org/19939
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22549